offsetwp/hook-bundle
The package is clearly documented and backed by a matching organization repository with tests and security scanning. Its maintenance record is too new to establish reliability, and all six workflow actions are unpinned.
65%
Total Score
75
100
94
67
Health Score Breakdown
This package was first released 0 days ago and has only one release, so there is no track record for maintenance or release reliability yet.
There were no commits or active maintainers in the last 3 months, but the repository and package are only 0 days old; this is limited evidence rather than proof of abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package intended for application integration.
The workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings, but all 6 of 6 action references are unpinned, weakening build reproducibility and update safety.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jérôme Wohlschlegel |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 offsetwp/hook Version ^1.1 | — | — |
psr/container Version ^1.1 || ^2.0 | — | — |
symfony/config Version ^8.1 | — | — |
offsetwp/framework Version ^1.1 | — | — |
symfony/dependency-injection Version ^8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 hours ago
- Created
- 7 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.